Explotación pública

Catálogo de exploits

Todo exploit público que catalogamos, en un solo índice. Busca por CVE, nombre del exploit o tecnología — y mira, al lado, lo que la falla realmente vale: severidad, probabilidad de explotación y si ya está bajo ataque.

81.453exploits catalogados
37.908CVEs con explotación pública
24.695probados en laboratorio
24.695 exploits
Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (7)
CVE-2000-0884—remotewindows18 nov 2000
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (6)
CVE-2000-0884—remotewindows18 nov 2000
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (9)
CVE-2000-0884—remotewindows18 nov 2000
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 and PWS - Extended Unicode Directory Traversal (8)
CVE-2000-0884—remotewindows18 nov 2000
IIS 4.0 and 5.0 allows remote attackers to read documents outside of the web root, and possibly execute arbitrary comman
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RedHat 6.2 Restore and Dump - Local Privilege Escalation
CVE-2000-1125—locallinux16 nov 2000
restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RealServer 5.0/6.0/7.0 - Memory Contents Disclosure
CVE-2000-1181—remotemultiple16 nov 2000
Real Networks RealServer 7 and earlier allows remote attackers to obtain portions of RealServer's memory contents, possi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RedHat 6.2 - '/sbin/restore' Local Privilege Escalation
CVE-2000-1125—locallinux16 nov 2000
restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Oracle (oidldapd connect) - Local Command Line Overflow
CVE-2000-0987—locallinux16 nov 2000
Buffer overflow in oidldapd in Oracle 8.1.6 allow local users to gain privileges via a long "connect" command line param
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
News Update 1.1 - Change Admin Password
CVE-2000-0944—webappscgi15 nov 2000
CGI Script Center News Update 1.1 does not properly validate the original news administration password during a password
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
LBL Traceroute - Local Privilege Escalation
CVE-2000-0949—locallinux15 nov 2000
Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Poll It CGI 2.0 - Multiple Vulnerabilities
CVE-2000-1069—webappscgi15 nov 2000
pollit.cgi in Poll It 2.01 and earlier allows remote attackers to access administrative functions without knowing the re
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Joe Kloss RobinHood 1.1 - Remote Buffer Overflow
CVE-2000-1154—remotebeos14 nov 2000
RHConsole in RobinHood 1.1 web server in BeOS r5 pro and earlier allows remote attackers to cause a denial of service vi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Small HTTP Server 2.0 1 - Non-Existent File Denial of Service
CVE-2000-0897—doswindows14 nov 2000
Small HTTP Server 2.03 and earlier allows remote attackers to cause a denial of service by repeatedly requesting a URL t
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
DCForum 1-6 - Arbitrary File Disclosure
CVE-2000-1132—remotecgi14 nov 2000
DCForum cgforum.cgi CGI script allows remote attackers to read arbitrary files, and delete the program itself, via a mal
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Linux modutils 2.3.9 - 'modprobe' Arbitrary Command Execution
CVE-2000-1095—locallinux12 nov 2000
modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell meta
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Computer Associates InoculateIT 4.53 - Microsoft Exchange Agent
CVE-2000-1244—localwindows10 nov 2000
Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP head
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Solaris 2.5/2.5.1/2.6/7.0 - 'sadmind' Remote Buffer Overflow (3)
CVE-1999-0977—remotesolaris10 nov 2000
Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft Indexing Service (Windows 2000) - File Verification
CVE-2000-1105—remotewindows10 nov 2000
The ixsso.query ActiveX Object is marked as safe for scripting, which allows malicious web site operators to embed a scr
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP-UX 10.20 - registrar Local Arbitrary File Read
CVE-2000-1127—localhp-ux08 nov 2000
registrar in the HP resource monitor service allows local users to read and modify arbitrary files by renaming the origi
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
YaBB 9.11.2000 - 'search.pl' Arbitrary Command Execution
CVE-2000-1176—remotecgi07 nov 2000
Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a ..
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0/5.0 - Executable File Parsing
CVE-2000-0886—remotewindows06 nov 2000
IIS 5.0 allows remote attackers to execute arbitrary commands via a malformed request for an executable file whose name
35RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Microsoft IIS 4.0 - ISAPI Buffer Overflow
CVE-2000-1147—localwindows06 nov 2000
Buffer overflow in IIS ISAPI .ASP parsing mechanism allows attackers to execute arbitrary commands via a long string to
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
RedHat 0.4 b15 restore - Insecure Environment Variables
CVE-2000-1125—locallinux04 nov 2000
restore 0.4b15 and earlier in Red Hat Linux 6.2 trusts the pathname specified by the RSH environmental variable, which a
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Solaris 2.6/7.0 /locale - Subsystem Format String
CVE-2000-0844—localsolaris02 nov 2000
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which
28RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
HP-UX 9.x/10.x/11.x - cu Buffer Overflow
CVE-2000-1028—doshp-ux02 nov 2000
Buffer overflow in cu program in HP-UX 11.0 may allow local users to gain privileges via a long -l command line argument
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Samba 2.0.7 - SWAT Symlink (1)
CVE-2000-0935—locallinux01 nov 2000
Samba Web Administration Tool (SWAT) in Samba 2.0.7 allows local users to overwrite arbitrary files via a symlink attack
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ManTrap 1.6.1 - Hidden Process Disclosure
CVE-2000-1140—localunix01 nov 2000
Recourse ManTrap 1.6 does not properly hide processes from attackers, which could allow attackers to determine that they
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
Samba 2.0.7 - SWAT Logfile Permissions
CVE-2000-0936—locallinux01 nov 2000
Samba Web Administration Tool (SWAT) in Samba 2.0.7 installs the cgi.log logging file with world readable permissions, w
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
ManTrap 1.6.1 - Root Directory Inode Disclosure
CVE-2000-1144—localunix01 nov 2000
Recourse ManTrap 1.6 sets up a chroot environment to hide the fact that it is running, but the inode number for the resu
23RIESGO
abrir ↗
Exploit-DB✓ VexDay Proof
FreeBSD 3.5/4.x - '/usr/bin/top' Format String
CVE-2000-0998—localfreebsd01 nov 2000
Format string vulnerability in top program allows local attackers to gain root privileges via the "kill" or "renice" fun
23RIESGO
abrir ↗
← anteriorpágina 602 / 824siguiente →

Indexamos solo el enlace público a la prueba de concepto — nunca alojamos ni redistribuimos código de explotación. Fuentes: PoC-in-GitHub, Exploit-DB, Nuclei, Metasploit y VulnCheck XDB. La existencia de PoC pública no significa que la falla sea explotable en tu entorno.